
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
jarvis-server
Advanced tools
Jarvis 服务器端, 查看演示项目
$ npm i jarvis-server
const JarvisServer = require('jarvis-server')
const server = new JarvisServer({
port: 3000,
secrets: '5r9b4vto246doa9hwk55rr'
})
并支持 ws 的所有参数
| 参数名 | 说明 | 类型 | 必填 |
|---|---|---|---|
| port | 端口号 | number | true |
| secrets | 链接密码 | string | true |
当没有控制端时, 我们可以通过 server.sendToReplica(command, args) 接口, 直接从服务器端向受控端发送指令
| 参数名 | 说明 | 类型 | 必填 |
|---|---|---|---|
| command | 指令名称 | number | true |
| args | 参数 | number | string | object | true |
server 支持直接接收 http 请求, 并将指令派发给受控端
需指定请求路径为 /command, 请求类型为 POST
设置请求头(secrets为服务端约定的密钥):
Content-Type 'application/json'
Authorization Bearer <secrets>
参数格式:
{
type: 'custom command',
args: object | number | string
}
服务端和受控端的使用方式, 可查阅下方文档
FAQs
Jarvis服务器端
We found that jarvis-server demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.